diff --git a/pyproject.toml b/pyproject.toml index d730f8b1884..89ea38c440b 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -48,9 +48,6 @@ ignore = [ "D104", # todo: Missing docstring in public package "D107", # Missing docstring in `__init__` "ANN101", # Missing type annotation for `self` in method - "S301", # todo: `pickle` and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue # todo - "S310", # todo: Audit URL open for permitted schemes. Allowing use of `file:` or custom schemes is often unexpected. # todo - "B905", # todo: `zip()` without an explicit `strict=` parameter ] ignore-init-module-imports = true unfixable = ["F401"] @@ -58,8 +55,18 @@ unfixable = ["F401"] [tool.ruff.lint.per-file-ignores] "setup.py" = ["ANN202", "ANN401"] "docs/source/conf.py" = ["A001", "D103"] -"src/**" = ["ANN401"] -"tests/**" = ["S101", "ANN001", "ANN201", "ANN202", "ANN401"] +"src/**" = [ + "ANN401", + "S310", # todo: Audit URL open for permitted schemes. Allowing use of `file:` or custom schemes is often unexpected. # todo + ] +"tests/**" = [ + "ANN001", + "ANN201", + "ANN202", + "ANN401", + "S101", + "S301", # todo: `pickle` and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue # todo + ] [tool.ruff.lint.pydocstyle] # Use Google-style docstrings.